Lucene search
+L

CVE-2008-0351

🗓️ 17 Jan 2008 23:00:00Reported by mitreType 
cve
 cve
🔗 web.nvd.nist.gov👁 71 Views🌐 WEB

admin/config.php in Evilsentinel 1.0.9 and earlier allows remote attackers to bypass the CAPTCHA test

Related
Detection
Refs
Paths
ReporterTitlePublishedViews
Family
cvelist
Cvelist
CVE-2008-0351
17 Jan 200823:00
–cvelist
exploitdb
Exploit DB
Evilsentinel 1.0.9 - Multiple Vulnerabilities Disable
10 Jan 200800:00
–exploitdb
euvd
EUVD
EUVD-2008-0361
7 Oct 202500:30
–euvd
nvd
NVD
CVE-2008-0351
18 Jan 200800:00
–nvd
prion
Prion
Authentication flaw
18 Jan 200800:00
–prion
rapid7
Rapid7 Vulnerability Database (full)
CVE-2008-0351: Improper Authentication
17 Jan 200800:00
–rapid7
NVD
Node
ParameterPositionPathDescriptionCWE
es_security_captcharequest body/admin/config.phpThe application allows bypassing the CAPTCHA test by omitting the 'es_security_captcha' parameter in the POST request.CWE-287
get_filterrequest body/admin/index.php?action=configThe application allows deactivating security filters and changing the notification email via the config action.CWE-287
post_filterrequest body/admin/index.php?action=configThe application allows deactivating security filters and changing the notification email via the config action.CWE-287
cookie_filterrequest body/admin/index.php?action=configThe application allows deactivating security filters and changing the notification email via the config action.CWE-287
xss_filterrequest body/admin/index.php?action=configThe application allows deactivating security filters and changing the notification email via the config action.CWE-287
rfi_filterrequest body/admin/index.php?action=configThe application allows deactivating security filters and changing the notification email via the config action.CWE-287
lfi_filterrequest body/admin/index.php?action=configThe application allows deactivating security filters and changing the notification email via the config action.CWE-287
sql_filterrequest body/admin/index.php?action=configThe application allows deactivating security filters and changing the notification email via the config action.CWE-287
email_notifyrequest body/admin/index.php?action=configThe application allows deactivating security filters and changing the notification email via the config action.CWE-287
notify_emailrequest body/admin/index.php?action=configThe application allows deactivating security filters and changing the notification email via the config action.CWE-287
Rows per page

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

16 Jun 2026 22:49Current
6.7Medium risk
Vulners AI Score6.7
CVSS 25
EPSS0.02326
71